FacebookInformation Technology Professionals in Milwaukee and Madison says there's the Child Online Privacy Protection Act or COPPA which bars this from happening with app users 13 years of age and younger without a parent's approval.

"Any personal unique identifier, not just name and social security number, needs to be protected information," Hager told CBS 58 News.

Disney says there's a misunderstanding about what the law really says and it plans to fight in court.

So, what can parents do?

"I think if you go to that app it covers a broad range, that princess pets app," added Hager. "It says what a lot of apps say. The app is free but right under it but offers in app purchases. That tells me, as a parent, that's not a good choice for children. That's tough because that's a lot of the apps that are out there. Free to get on the platform but then they try to "up-sell" you by buying fake currency, or whatever it might be to upgrade your pet or car whatever that application might be."